Update dependencies

Patches out vulnerable versions of IPython from CVE-2022-21699. See more info https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
gotcha · Dec 13, 2022 · 0b45377 · 0b45377
1 parent 546ebce
commit 0b45377
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/HISTORY.txt b/HISTORY.txt
@@ -13,6 +13,11 @@ Changelog
 - 3.11 support for run as module and run as script.
   [nphilipp, gotcha]
 
+- Based on OSV:PYSEC-2022-12 change ipython dependencies,
+  for users using python 3.6, install 7.16.3 <= IPython < 7.17.0,
+  for users using python>3.6, install IPython >= 7.31.1.
+  [malkstar]
+
 
 0.13.9 (2021-06-02)
 -------------------

diff --git a/setup.py b/setup.py
@@ -62,9 +62,9 @@
           # FTR, `decorator` is also a dependency of Ipython.
           ':python_version == "3.4"': ['ipython >= 6.0.0, < 7.0.0', 'toml >= 0.10.2', 'decorator < 5.0.0'],
           ':python_version == "3.5"': ['ipython >= 7.0.0, < 7.10.0', 'toml >= 0.10.2', 'decorator'],
-          ':python_version == "3.6"': ['ipython >= 7.10.0, < 7.17.0', 'tomli', 'decorator'],
-          ':python_version > "3.6" and python_version < "3.11"': ['ipython >= 7.17.0', 'tomli', 'decorator'],
-          ':python_version >= "3.11"': ['ipython >= 7.17.0', 'decorator'],
+          ':python_version == "3.6"': ['ipython >= 7.16.3, < 7.17.0', 'tomli', 'decorator'],
+          ':python_version > "3.6" and python_version < "3.11"': ['ipython >= 7.31.1', 'tomli', 'decorator'],
+          ':python_version >= "3.11"': ['ipython >= 7.31.1', 'decorator'],
       },
       tests_require=[
           'mock; python_version<"3"'